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(54) Redundant steer-by-wire system 


(57) A steer-by-wire system includes a first network 
(10). The first network (1 0) networks with a first pair of 
controllers (14, 16) that drives at least a first pair of mo- 
tors (42, 54). The steer-by-wire system further includes 
a second network (12) that is independent of the first 
network (10). The second network (12) networks with a 
second pair of controllers (18, 20) that drives the second 
pair of motors (44, 56) in conjunction with the first net- 
work (10). Lastly, the steer-by-wire system includes a 
third network (24) that networks with the first pair of con- 


trollers (14, 1 6), and the second pair of controllers (1 8, 
20) whereby information is transmitted via the third net- 
work (24) independent of the first network (1 0) and the 
second network (12). 

A method for a steer-by-wire system that includes 
the usage of a third network (24) if a first network (10) 
and a second network (1 2) whose normal function is dis- 
rupted. Another method for a steer-by-wire system that 
includes the usage of a third network (24) if a master 
controller (22) whose normal function is disrupted. 
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Description 

TECHNICAL FIELD 

[0001] This invention relates to steer-by-wire sys- 
tems, and more particularly, to steer-by-wire systems 
with built-in redundancy. 

BACKGROUND OF THE INVENTION 

[0002] Steer-by-wire systems typically eliminate me- 
chanical connections. Conventional steering systems 
with hydraulic or electric assist mechanisms are com- 
monly used. Typically, the reliability of the system as a 
whole, as well as the reliability of subsystems need to 
be better than for conventional systems. The reason, 
among others, is failure of one part of the system may 
have grave consequences in that the steer-by-wire sys- 
tem typically do not have sufficient redundancy. There- 
fore, redundancy considerations are important both in 
system level and subsystem level. 

BRIEF SUMMARY OF THE INVENTION 

[0003] A steer-by-wire system includes a first net- 
work. The first network networks with a first pair of con- 
trollers that drives at least a first pair of motors. The 
steer-by-wire system further includes a second network 
that is independent of the first network. The second net- 
work networks with a second pair of controllers that 
drives the second pair of motors in conjunction with the 
first network. Lastly, the steer-by-wire system includes 
a third network that networks with the first pair of con- 
trollers, and the second pair of controllers whereby in- 
formation is transmitted via the third network independ- 
ent of the first network and the second network. 
[0004] A method for a steer-by-wire system that in- 
cludes the usage of a third network if a first network and 
a second network whose normal function is disrupted. 
Another method for a steer-by-wire system that includes 
the usage of a third network if a master controller whose 
normal function is disrupted. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0005] 

Figures 1 and 2 are schematics for the invention. 

Figure 3 is an embodiment of the invention. 

DETAILED DESCRIPTION OF THE INVENTION 

[0006] A system described here uses four electric mo- 
tors to drive the two steering gears, two motors per gear. 
Motion of the left and right gears, which are coupled to 
tie rods and left/right road wheels, are independently 
controlled by electronic controllers. In other words, one 


controller is designated for each motor wiring. Each one 
of these controllers is called "local" controllers. Two mo- 
tors drive each gear for redundancy. It can be appreci- 
ated that this allows for the possibility of no mechanical 

5 link between the left and right sides of the vehicle. Two 
absolute position sensors and two high-resolution posi- 
tion sensors are used per tie rod. 
[0007] In addition, the system uses one additional 
electric motor and controller assembly to generate 

10 torque feedback to the driver to simulate "road forces" 
normally felt at the steering wheel in a conventional 
steering system equipped vehicle. In otherwords, a unit 
with a fifth motor with its concomitant controller inde- 
pendent of the other four motors is described. This unit 

15 is called the "steering wheel actuator". Sensors are pro- 
vided in the tie rods to measure the road forces gener- 
ated by each respective wheel/steering knuckle assem- 
bly. 

[0008] Furthermore, a "master" controller is used to 
20 coordinate the operation of the above described five 
controllers. The master controller controls the operation 
of each local controller. In addition, the master controller 
generates a torque feedback command for the steering 
wheel actuator to acquire, and displays information to a 
25 vehicle operator through status lamps. Also, the master 
controller communicates to other electronic vehicle con- 
trollers, for example, communication with a brake con- 
troller in order to bring a vehicle to a stop if the system 
fails. In yet another example, the master controller may 
30 generate automatic steering commands for automatic 
driving. Lastly, the master controller provides a signal to 
the local controllers with the signal indicating the health 
of the master controller. 

[0009] The above mentioned five controllers commu- 
35 nicatewith each other via three networks. The three net- 
works use a protocol, such as the Controller Area Net- 
work (CAN) protocol. In the preferred embodiment, the 
three networks are CAN1 , CAN2, and a safety backup 
network. The network transmission media may be opti- 
40 cal fiber or copper wires or other suitable transmission 
media. 

[0010] In addition, the safety backup network, i.e., a 
network having a "backup CAN converter" is present. 
The safety "backup CAN converter" reads steering 

45 wheel position sensors, and transmits a sensed infor- 
mation via the safety "backup CAN converter" to the lo- 
cal controllers in order to allow proper steering and ve- 
hicle control when normal operation of the system is dis- 
rupted. However, the safety "backup CAN converter" 

50 may render a reduced performance. 

[001 1 ] Electrical power is provided by way of two bat- 
teries each independently supplying the system. The 
reason for the two batteries is that failure of one battery 
is not going to affect the operation of the other battery. 

55 in otherwords, a redundancy in power supply is includ- 
ed in the instant invention. 

[0012] Referring to Figures 1 and 2, a schematic for 
the instant invention is described. Under normal oper- 


2 


3 


EP 1 219 525 A2 


4 


ating conditions, a CAN1 10 and a CAN2 12 transmit 
and carry signals to their respective controllers. In other 
words, a left controller A 14 and a right controller A 16 
for the CAN1 10, as well as a left controller B 18 and a 
right controller B 20 for the CAN2 12. In cases that dis- 
able both CAN1 10andCAN2 12, or if a master control- 
ler 22 fails, a third network, a backup CAN 24, will trans- 
mit steering wheel position signals to the local control- 
lers 14,16,18, and 20 to allow basic steering of the road 
wheels. If only one CAN fails, the two controllers con- 
nected to that CAN drop out, and the vehicle continues 
to steer using only the remaining two controllers. The 
motors and controllers will therefore preferably be pow- 
erful enough to drive the vehicle with only two of them 
operational. Note that the backup CAN 24 is a safety 
feature that operates only in certain situation where 
backup is needed. A set of left sensors 26 sense a set 
of signals that include position signals 28 and 30. The 
position signals 28 and 30 are fed into the left controller 
A 14 and the left controller B 18 respectively with posi- 
tion signal 28 fed into the left controller A 1 4 and position 
signal 30 fed into the left controller B 18. Furthermore, 
the position signals 28 and 30 sense a rotating member 
(not shown) that is coupled to a left wheel 32. 
[0013] Complementarily, a set of right sensors 34 
sense a set of signals that include position signals 36 
and 38. The position signals 36 and 38 are fed into the 
right controller A 1 6 and the right controller B 20 respec- 
tively with position signal 36 fed into the right controller 
A 16 and position signal 38 fed into the right controller 
B 20. Furthermore, the position signals 36 and 38 sense 
a rotating member (not shown) that is coupled to a right 
wheel 40. 

[0014] The left controller A 14 and left controller B 18 
independently drive left motor one, 42 and left motor 
two, 44 respectively. The drive is accomplished inde- 
pendently via drives 46 and 48 respectively. Two batter- 
ies, the first battery 50, and the second battery 52 each 
independently supply the above independent control- 
lers. In other words, the first battery 50, independent of 
the second battery 52, supplies left controller A 14. Sim- 
ilarly, the second battery 52, independent of the first bat- 
tery 50, supplies left controller B 1 8. The independence 
is further enhanced by way of having left controller A 14 
independently coupled to CAN1 10, whereas left con- 
troller B 1 8, independent of left controller A 1 4, is cou- 
pled to CAN2 12. 

[0015] Similarly, the right controller A 1 6 and right con- 
troller B 20 independently drive right motor one, 54 and 
right motor two, 56 respectively. The drive is accom- 
plished independently via drives 58 and 60 respectively. 
Two batteries, a first battery 50, and a second battery 
52 each independently supply the above independent 
controllers. In other words, the first battery 50, inde- 
pendent of the second battery 52, supplies right control- 
ler A 16. Similarly, the second battery 52, independent 
of the first battery 50, supplies right controller B 20. The 
independence is further enhanced by way of having 


right controller A 1 6 independently coupled to CAN1 10, 
whereas right controller B 20, independent of right con- 
troller A 1 6, is coupled to CAN2 1 2. 
[0016] The master controller 22 is coupled to CAN1 

5 1 0, CAN2 12, as well as being supplied by the first bat- 
tery 50, and the second battery 52. Additionally, the 
master controller 22 is coupled to a central processing 
unit (CPU) via a data bus 62. Furthermore, the set of left 
sensors 26 senses a first force or torque signal 64 that 

10 is derived from the left wheel 32. Thefirstforce ortorque 
signal 64 are fed into the master controller 22. Similarly, 
the set of right sensors 34 senses a second force or 
torque signal 66 that is derived from the right wheel 40. 
The second force or torque signal 66 are fed into the 

15 master controller 22. 

[0017] Under normal operation conditions, a steering 
wheel actuator 68 that is coupled to a steering wheel 
communicates through CAN1 10, and CAN 2 12. In ad- 
dition, the steering wheel actuator 68 is powered by the 

20 first battery 50 and the second battery 52. The steering 
wheel actuator 68 is also coupled to a motor, which in 
turn is coupled to a second set of sensors 72. 
[0018] Under abnormal operating conditions, which 
include failure of CAN1 10, and CAN2 12, as well as 

25 failure of the master controller 22. Firstly, we will discuss 
failure of CAN1 10, and CAN2 12. As can be appreciat- 
ed, the failure of CAN1 10, and CAN2 12 necessarily 
disrupts communication within the networks of CAN1 
10, and CAN 2 12 respectively. In other words, the com- 

30 munications via CAN1 10 with left controller A 14 and 
right controller A 1 6 is disrupted. Similarly, the commu- 
nications via CAN2 1 2 with left controller B 1 8 and right 
controller B 20 is disrupted. However, the left controller 
A 14 and right controller A 1 6, as well as left controller 

35 B 1 8 and right controller B 20 need to be suitably in op- 
eration somehow. The backup CAN 24 performed some 
of the requisite operations. In other words, the backup 
CAN 24 couples the left controller A 14 and the right 
controller A 16, as well as left controller B 18 and right 

40 controller B 20 with the set of sensors 72. The set of 
sensors 72 in turn is coupled to the steering wheel ac- 
tuator controller 68. A set of steering wheel sensors (not 
shown) sensing information from the steering wheel 74 
is coupled to the backup CAN 24, thereby the sensed 

45 information form the steering wheel 74 can be commu- 
nicated to the left controller A 14 and the right controller 
A 16, as well as the left controller B 18 and the right 
controller B 20 with the set of sensors 72. Furthermore, 
the backup CAN 24 is supplied by the first battery 50 

50 and the second battery 52. 

[0019] Secondly, lets discuss the abnormal condition 
of a failure of the master controller 22. The master con- 
troller 22 further has a set of master fault status lines 
76, 78. 80, 82 that communicate with the left controller 

55 A 14 and the right controller A 16, as well as the left 
controller B 1 8 and the right controller B 20. When the 
master controller 22 is functioning abnormally, the set 
of master fault status lines 76, 78, 80, 82 communicate 
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with the left controller A 1 4 and the right controller A 1 6, 
as well as the left controller B 1 8 and the right controller 
B 20 thereby causing the left controller A 1 4 and the right 
controller A 16, as well as the left controller B 18 and 
the right controller B 20 to use data 

from the backup CAN 24. The controllers are pref- 
erably always communicating with the backup CAN. not 
just during faults, so there is no increase in bus traffic 
during faults. This keeps the communications predicta- 
ble under fault conditions. 

[0020] The master controller 22 has pulse width mod- 
ulation (PWM) brake link 84 that can generate a com- 
mand to cause the vehicle to stop. The master controller 
22 further has a one Hertz (Hz) timing input command, 
which functions as a set point command for the master 
controller 22. 

[0021] Referring to Figure 3, one embodiment among 
others for the instant invention is depicted. A right motor 
mechanism 88 having its driving mechanism coupled to 
a driving system 89. For example, a rotor (not shown) 
of the right motor may link with an adjustable rotating 
member such as a tie rod. The right controller A 1 6 and 
the right controller B 20, via their respective motor drives 
58 60, activate the motor mechanism 88. Upon inspec- 
tion of Figure 3, it will be seen that only one motor casing 
is on the right side. However, the inner wiring can con- 
tain two independent sets of stator wiring. Complemen- 
tarity, a left motor mechanism 90 having its driving 
mechanism coupled to a driving system 89. For exam- 
ple, a rotor (not shown) of the left motor may link with 
an adjustable rotating member such as a tie rod. The 
left controller A 1 4 and the left controller B 28, via their 
respective motor drives 46 48, activate the motor mech- 
anism 90. Upon inspection of Figure 3, it will be seen 
that only one motor casing is on the left side. However, 
the inner wiring can contain two independent sets of sta- 
tor wiring. 

[0022] The instant invention may embody only one 
casing for both the right side and the left side with a set 
of four or more wiring that are independent of each other. 
In other words, the wiring independently controlled by 
their respective controllers. For example, by the control- 
lers such as the left controller A 1 4 and the right control- 
ler A 1 6, as well as the left controller B 1 8 and the right 
controller B 20, etc. 

[0023] Other by-wire systems, commonly known as 
X-by-wire systems may be included in the purview of the 
instant invention. For example, some brake-by-wire sys- 
tems may suitably implement the apparatus and meth- 
ods of the instant invention. X-by-wire system is unique 
in that no mechanical links exists between, for example, 
a vehicle operator holding the steering wheel and the 
force of torque exerted upon a pair of front wheels of a 
vehicle. The uniqueness demands that the system be 
fail-safe. In other words, for system such as electric 
power steering or assisting system, an electric machine 
such as a motor, a mechanical link still exists. The motor 
is merely assisting the mechanical link in that if a failure 


of the motor occurs, the system may still function by re- 
lying upon the mechanical link. 

[0024] We have described a steer-by-wire system 
that includes a first network. The first network networks 

5 with a first pair of controllers that drives at least a first 
pair of motors. The steer-by-wire system further in- 
cludes a second network that is independent of the first 
network. The second network networks with a second 
pair of controllers that drives the first pair of motors in 

10 conjunction with the first network. Lastly, the steer-by- 
wire system includes a third network that networks with 
the first pair of controllers, and the second pair of con- 
trollers whereby information is transmitted via the third 
network independent of the first network and the second 

15 network. 

[0025] We have also described a method for a steer- 
by-wire system that includes the usage of a third net- 
work if a first network and a second network whose nor- 
mal function is disrupted. Further, the third network 
20 could be used if a master controller's normal function is 
disrupted. 

[0026] A person skilled in the art may make modifica- 
tions to the preferred embodiment shown herein within 
the scope and intent of the claims. While the present 
25 invention has been described as carried out in a specific 
embodiment thereof, it is not intended to be limited 
thereby but intended to cover the invention broadly with- 
in the scope and spirit of the claims. 


1 . A steer-by-wire system comprising: 

35 a first network (10) networking a first pair of 

controllers (1 4, 1 6) for driving at least a first pair 
of motors (42, 54); 

a second network (1 2) independent of said first 
40 network (1 0), networking a second pair of con- 

trollers (1 8, 20) for driving a second pair of mo- 
tors (44, 56) in conjunction with said first net- 
work (10); and 

45 a third network (24) networking with said first 

pair of controllers (14, 16), and said second pair 
of controllers (18, 20) whereby information is 
transmitted via said third network (24) inde- 
pendent of said first network (1 0) and said sec- 
50 ond network (12). 

2. The steer-by-wire system of claim 1 further com- 
prising: 

55 a master controller (22) coupled to said first net- 

work (10) and said second network (12). 

3. The steer-by-wire system of claim 1 , wherein: 


30 

Claims 


40 


45 


50 
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said first network (1 0) and said second network 
(12), as well as said third network (24) use Con- 
troller Area Network (CAN) protocol. 

4. The steer-by-wire system of claim 1 , wherein: 5 

said first pair of controllers (14, 16) and said 
second pair of controllers (1 8, 20) independent- 
ly controls a first pair of motor drivers driving a 
pair of electric machine wiring, and a second 10 
pair of motor drivers driving a pair of electric 
machine wiring. 

5. The steer-by-wire system of claim 2 further com- 
prising: 15 

a first set of sensors (26) sensing information 
from a first set of rolling members (32), said in- 
formation is transmitted to said first pair of con- 
trollers (14, 1 6) and said second pair of control- 20 
lers (18, 20), as well as transmitted to said mas- 
ter controller (22). 

6. The steer-by-wire system of claim 5, wherein: 

25 

said information comprises. 

position information of said first set of rolling 
members (32); and 

30 

force information of said first set of rolling mem- 
bers (32). 

7. The steer-by-wire system of claim 1 further com- 
prising: 35 

a second set of sensors (34) coupled to said 
third network (24) for sensing information from 
a second rolling member (40). 

40 

8. The steer-by-wire system of claim 7, wherein said 
information comprises, 

position information of said second rolling 
member (40). 

45 

9. A method for a steer-by-wire system, comprising: 

if a first network (10) and a second network (12) 
whose normal function is disrupted, using a 
third network (24). 50 

10. A method for a steer-by-wire system, comprising: 

if a master controller (22) whose normal func- 
tion is disrupted, using a third network (24). 55 
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